container-selinux-2:2.221.0-1.module_el8+653+feef7bfe l>\  H$(GXd U]ݠ?rH$"H3m6<_ObF^} vr߭9㙷z%on/} dj"3RzȢI;h qS9P|F_o%4 SʝE*qܮJԄ 39Qԛ2:GU(Fx~xfsg X(jZFc{H;i&=Z EScx wXr2"_vsaYFc[?۷ؖ9[UU`O2w۽=rXB&-@Kݛ kӘ$&Kg+?z23+nșz.Gn ʯmTA|_(8|,_J:C运G&\H߮hZVȞ 燌@\BCI?zqB“)nsEq( gj5*˪?A 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 U]cjG0JKQnu):8~>_OA N88 "kr (+Hj4z){MR'4@7A; fLrkrYY:9yJTG5,/UA|oxM61#i*(] uݳ᪽p{ۊ H Zu+H ZDժnpJZQ  q*PL~Az4 Kg!O=Wfr)u7ڼ5(ҽ 1WvWa%_6zcз7՞I8P4b|AUOԨ3sqH]Mm]eeӡ' M]TѩT5Rtּt\b5nLh)a:k/(ex; D理=9Iߩ$3c_: 8kEut=8vEȡ7 d>pIj3?j#d8 < d +18q4 \    (  <   T  TT(89:-<=a>a@aBaGaHbIbhXb|YbZb[b\c]cd^d bedfeffflftgug`vggiiiiiiCcontainer-selinux2.221.01.module_el8+653+feef7bfeSELinux policies for container runtimesSELinux policy modules for use with container runtimes.dܝppc64le-02.stream.rdu2.redhat.com CentOSCentOSGPLv2builder@centos.orgUnspecifiedhttps://github.com/containers/container-selinuxlinuxnoarch . /etc/selinux/config _policytype=targeted if [ -z "${_policytype}" ]; then _policytype="targeted" fi if /usr/sbin/selinuxenabled && [ "${SELINUXTYPE}" = "${_policytype}" ]; then [ -f /var/lib/rpm-state/file_contexts.pre ] || cp -f /etc/selinux/${SELINUXTYPE}/contexts/files/file_contexts /var/lib/rpm-state/file_contexts.pre fi# Install all modules in a single transaction if [ $1 -eq 1 ]; then /usr/sbin/setsebool -P -N virt_use_nfs=1 virt_sandbox_use_all_caps=1 fi export MODULES=""; for x in container; do MODULES+=/usr/share/selinux/packages/$x.pp.bz2; MODULES+=" "; done; /usr/sbin/semodule -n -s targeted -r container 2> /dev/null /usr/sbin/semodule -n -s targeted -d docker 2> /dev/null /usr/sbin/semodule -n -s targeted -d gear 2> /dev/null . /etc/selinux/config _policytype=targeted if [ -z "${_policytype}" ]; then _policytype="targeted" fi if [ "${SELINUXTYPE}" = "${_policytype}" ]; then /usr/sbin/semodule -n -s ${_policytype} -X 200 -i $MODULES /usr/sbin/selinuxenabled && /usr/sbin/load_policy || : fi . /etc/selinux/config sed -e "\|container_file_t|h; \${x;s|container_file_t||;{g;t};a\\" -e "container_file_t" -e "}" -i /etc/selinux/${SELINUXTYPE}/contexts/customizable_types > /dev/null 2>&1 matchpathcon -qV /var/lib/containers || restorecon -R /var/lib/containers &> /dev/null || :if [ $1 -eq 0 ]; then . /etc/selinux/config _policytype=targeted if [ -z "${_policytype}" ]; then _policytype="targeted" fi if [ $1 -eq 0 ]; then if [ "${SELINUXTYPE}" = "${_policytype}" ]; then /usr/sbin/semodule -n -X 200 -s ${_policytype} -r container docker &> /dev/null || : /usr/sbin/selinuxenabled && /usr/sbin/load_policy || : fi fi fi6f~b0(: BA큤A큤AAA큤A큤A큤dܝdܝdܝd^Ddܝdܝdܝdܝdܝdܝdܝdܝdܝdܝdܝdܝdܝdܝdܝdܝ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-selinux-2.221.0-1.module_el8+653+feef7bfe.src.rpmcontainer-selinuxdocker-engine-selinuxdocker-selinux         /bin/sh/bin/sh/bin/sh/bin/shlibselinux-utilspolicycoreutilspolicycoreutils-python-utilsrpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)sedselinux-policyselinux-policy-baseselinux-policy-targeted2.5-113.0.4-14.6.0-14.0-15.2-13.14.3-80.el83.14.3-80.el83.14.3-80.el8udica0.2.6-14.14.3dhd@ddm@dcp@dbdRLdd@d @c @cc_c!@bVbbkb_b<]@b%b@bOb@aar@a@a@a@aaa+@aaa]aQ@aI@aA@a'@a&0a /` @`9@`Ȗ@```q`@`@`N@`@`dd@`Y@`&m`_T_`@_%_%_F@__"_5+@_16_p@_5_X@^n@^Ӝ@^@^^k@]@]B]]@]|@]@]X]W]R@]@\M[[ͻ[[@[[Xf@[L[K7@["X[@[@[[[Z@Z?ZZZ%Z%Z@Z - 2:2.221.0-1Jindrich Novy - 2:2.219.0-1Jindrich Novy - 2:2.218.0-1Jindrich Novy - 2:2.215.0-1Jindrich Novy - 2:2.213.0-2Jindrich Novy - 2:2.213.0-1Jindrich Novy - 2:2.211.1-1Jindrich Novy - 2:2.205.0-2Jindrich Novy - 2:2.205.0-1Jindrich Novy - 2:2.199.0-1Jindrich Novy - 2:2.195.1-1Jindrich Novy - 2:2.193.0-1Jindrich Novy - 2:2.191.0-1Jindrich Novy - 2:2.190.0-1Jindrich Novy - 2:2.189.0-1Jindrich Novy - 2:2.188.0-1Jindrich Novy - 2:2.187.0-1Jindrich Novy - 2:2.183.0-1Jindrich Novy - 2:2.181.0-1Jindrich Novy - 2:2.180.0-1Jindrich Novy - 2:2.179.1-1Jindrich Novy - 2:2.178.0-1Jindrich Novy - 2:2.177.0-1Jindrich Novy - 2:2.176.0-1Jindrich Novy - 2:2.174.0-1Jindrich Novy - 2:2.173.2-1Jindrich Novy - 2:2.173.1-2Jindrich Novy - 2:2.173.1-1Jindrich Novy - 2:2.173.0-2Jindrich Novy - 2:2.173.0-1Jindrich Novy - 2:2.172.1-1Jindrich Novy - 2:2.172.0-1Jindrich Novy - 2:2.171.0-1Jindrich Novy - 2:2.170.0-1Jindrich Novy - 2:2.169.0-1Vit Mojzis - 2:2.168.0-2Jindrich Novy - 2:2.168.0-1Jindrich Novy - 2:2.167.0-1Jindrich Novy - 2:2.165.1-2Jindrich Novy - 2:2.164.2-1Jindrich Novy - 2:2.164.1-1Jindrich Novy - 2:2.163.0-2Jindrich Novy - 2:2.163.0-1Jindrich Novy - 2:2.162.2-1Jindrich Novy - 2:2.162.1-1Jindrich Novy - 2:2.162.0-1Jindrich Novy - 2:2.161.1-2Jindrich Novy - 2:2.161.1-1Jindrich Novy - 2:2.160.2-1Jindrich Novy - 2:2.160.1-1Jindrich Novy - 2:2.160.0-1Jindrich Novy - 2:2.159.0-1Jindrich Novy - 2:2.158.0-1Jindrich Novy - 2:2.156.0-1Jindrich Novy - 2:2.155.0-1Jindrich Novy - 2:2.154.0-1Jindrich Novy - 2:2.153.0-1Jindrich Novy - 2:2.152.0-1Jindrich Novy - 2:2.151.0-1Jindrich Novy - 2:2.150.0-1Jindrich Novy - 2:2.145.0-1Jindrich Novy - 2:2.144.0-1Jindrich Novy - 2:2.143.0-1Jindrich Novy - 2:2.142.0-1Jindrich Novy - 2:2.139.0-1Jindrich Novy - 2:2.138.0-1Jindrich Novy - 2:2.137.0-1Jindrich Novy - 2:2.135.0-1Jindrich Novy - 2:2.134.0-1Jindrich Novy - 2:2.132.0-1Jindrich Novy - 2:2.130.0-1Jindrich Novy - 2:2.124.0-1Jindrich Novy - 2:2.123.0-2Jindrich Novy - 2:2.123.0-1Jindrich Novy - 2:2.122.0-1Jindrich Novy - 2:2.119.0-3.gita233788Jindrich Novy - 2:2.119.0-2Jindrich Novy - 2:2.119.0-1Jindrich Novy - 2:2.116-1Jindrich Novy - 2:2.107-2Lokesh Mandvekar - 2:2.107-1Lokesh Mandvekar - 2:2.89-1.git2521d0dLokesh Mandvekar - 2:2.75-1.git99e2cfdLokesh Mandvekar - 2:2.74-1Frantisek Kluknavsky - 2:2.73-3Frantisek Kluknavsky - 2:2.73-2Dan Walsh - 2.69-3Dan Walsh - 2.69-2Dan Walsh - 2.68-1Dan Walsh - 2.67-1Dan Walsh - 2.66-1Dan Walsh - 2.64-1Dan Walsh - 2.62-1Dan Walsh - 2.61-1Dan Walsh - 2.60-1Dan Walsh - 2.58-2Dan Walsh - 2.58-1Dan Walsh - 2.57-1Dan Walsh - 2.56-1Dan Walsh - 2.55-1Dan Walsh - 2.52-1Dan Walsh - 2.51-1Dan Walsh - 2.50-1Dan Walsh - 2.49-1Dan Walsh - 2.48-1Dan Walsh - 2.41-1Dan Walsh - 2.40-1Dan Walsh - 2.39-1Dan Walsh - 2.38-1Dan Walsh - 2.37-1Dan Walsh - 2.36-1Dan Walsh - 2.35-1Dan Walsh - 2.34-1Dan Walsh - 2.33-1Dan Walsh - 2.32-1Dan Walsh - 2.31-1Dan Walsh - 2.29-1Dan Walsh - 2.28-1Dan Walsh - 2.27-1Dan Walsh - 2.24-1Dan Walsh - 2.23-1Dan Walsh - 2.22-1Troy Dawson - 2.21-3Fedora Release Engineering - 2:2.21-2Dan Walsh - 2.21-1Dan Walsh - 2.20-2Dan Walsh - 2.20-1Lokesh Mandvekar - 2:2.19-2.1Dan Walsh - 2:2.19-1Lokesh Mandvekar - 2:2.15-1.1Dan Walsh - 2:2.10-2.1Dan Walsh - 2:2.10-1Lokesh Mandvekar - 2:2.9-4Lokesh Mandvekar - 2:2.9-3Lokesh Mandvekar - 2:2.9-2Lokesh Mandvekar - 2:2.8-2Lokesh Mandvekar - 2:2.7-1Lokesh Mandvekar - 2:2.4-2Dan Walsh - 2:2.4-1Dan Walsh - 2:2.3-1Lokesh Mandvekar - 2:2.2-4Jonathan Lebon - 2:2.2-3Lokesh Mandvekar - 2:2.2-2Lokesh Mandvekar - 2:2.2-1Lokesh Mandvekar - 2:2.0-2Lokesh Mandvekar - 2:2.0-1Lokesh Mandvekar - 2:1.12.4-29- update to https://github.com/containers/container-selinux/releases/tag/v2.221.0 - Related: #2176055- update to https://github.com/containers/container-selinux/releases/tag/v2.219.0 - Related: #2176055- update to https://github.com/containers/container-selinux/releases/tag/v2.218.0 - Related: #2176055- update to https://github.com/containers/container-selinux/releases/tag/v2.215.0 - Related: #2176055- add watch statement removal from container.te - Related: #2176055- update to https://github.com/containers/container-selinux/releases/tag/v2.213.0 - Related: #2176055- update to https://github.com/containers/container-selinux/releases/tag/v2.211.1 - Related: #2176055- use conditionals from https://github.com/containers/container-selinux/blob/main/container-selinux.spec.rpkg - Related: #2176055- update to https://github.com/containers/container-selinux/releases/tag/v2.205.0 - remove user_namespace class, thanks to Lokesh Mandvekar - Related: #2176055- revert back to https://github.com/containers/container-selinux/releases/tag/v2.199.0 (2.200.0 fails to build as it relies on the new selinux-policy which is not there yet) - Related: #2176055- update to https://github.com/containers/container-selinux/releases/tag/v2.195.1 - Related: #2123641- update to https://github.com/containers/container-selinux/releases/tag/v2.193.0 - Related: #2123641- update to https://github.com/containers/container-selinux/releases/tag/v2.191.0 - Related: #2123641- update to https://github.com/containers/container-selinux/releases/tag/v2.190.0 - Related: #2123641- update to https://github.com/containers/container-selinux/releases/tag/v2.189.0 - Related: #2061390- update to https://github.com/containers/container-selinux/releases/tag/v2.188.0 - Related: #2061390- update to https://github.com/containers/container-selinux/releases/tag/v2.187.0 - Related: #2061390- update to https://github.com/containers/container-selinux/releases/tag/v2.183.0 - Related: #2061390- update to https://github.com/containers/container-selinux/releases/tag/v2.181.0 - Related: #2061390- update to https://github.com/containers/container-selinux/releases/tag/v2.180.0 - Related: #2061390- update to https://github.com/containers/container-selinux/releases/tag/v2.179.1 - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.178.0 - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.177.0 - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.176.0 - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.174.0 - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.173.2 - Related: #2001445- update minimal selinux_policy dependency - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.173.1 - Related: #2001445- lockdown allow rule was removed - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.173.0 - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.172.1 - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.172.0 - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.171.0 - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.170.0 - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.169.0 - Related: #2001445- Start shipping udica templates - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.168.0 - Related: #2001445- update to https://github.com/containers/container-selinux/releases/tag/v2.167.0 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.165.1 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.164.2 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.164.1 - Related: #1934415- fix the build of 2.163.0 - Resolves: #1957904- update to https://github.com/containers/container-selinux/releases/tag/v2.163.0 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.162.2 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.162.1 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.162.0 - Related: #1934415- do not use lockdown class yet - it is not available in RHEL - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.161.1 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.160.2 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.160.1 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.160.0 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.159.0 - Related: #1934415- update to https://github.com/containers/container-selinux/releases/tag/v2.158.0 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.156.0 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.155.0 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.154.0 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.153.0 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.152.0 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.151.0 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.150.0 - Related: #1883490- synchronize with stream-container-tools-rhel8 - Related: #1883490- update to https://github.com/containers/container-selinux/releases/tag/v2.144.0 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.143.0 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.142.0 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.139.0 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.138.0 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.137.0 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.135.0 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.134.0 - Related: #1821193- synchronize containter-tools 8.3.0 with 8.2.1 - Related: #1821193- update to https://github.com/containers/container-selinux/releases/tag/v2.130.0 - don't use macros in changelog - Related: #1821193- update to 2.124.0 - Related: RHELPLAN-25139- implement spec file refactoring by Zdenek Pytela, namely: Change the uninstall command in the %postun section of the specfile to use the %selinux_modules_uninstall macro which uses priority 200. Change the install command in the %post section if the specfile to use the %selinux_modules_install macro. Replace relabel commands with using the %selinux_relabel_pre and %selinux_relabel_post macros. Change formatting so that the lines are vertically aligned in the %postun section. (https://github.com/containers/container-selinux/pull/85) - Related: RHELPLAN-25139- update to 2.123.0 - Related: RHELPLAN-25139- update to 2.122.0 - Related: RHELPLAN-25139- update to master container-selinux - bug 1769469 - Related: RHELPLAN-25139- fix post scriptlet - fail if semodule fails - bug 1729272 - Related: RHELPLAN-25139- update to 2.119.0 - Related: RHELPLAN-25139- update to 2.116 Resolves: #1748519- Use at least selinux policy 3.14.3-9.el8, Resolves: #1728700- Resolves: #1720654 - rebase to v2.107- bump to v2.89- bump to v2.75 - built commit 99e2cfd- Resolves: #1641655 - bump to v2.74 - built commit a62c2db- tweak macro for fedora - applies to rhel8 as well- moved changelog entries: - Define spc_t as a container_domain, so that container_runtime will transition to spc_t even when setup with nosuid. - Allow container_runtimes to setattr on callers fifo_files - Fix restorecon to not error on missing directory- Make sure we pull in the latest selinux-policy- Add map support to container-selinux for RHEL 7.5 - Dontudit attempts to write to kernel_sysctl_t- Add label for /var/lib/origin - Add customizable_file_t to customizable_types- Add policy for container_logreader_t- Allow dnsmasq to dbus chat with spc_t- Allow containers to create all socket classes- Label overlay directories under /var/lib/containers/ correctly- Allow spc_t to load kernel modules from inside of container- Allow containers to list cgroup directories - Transition for unconfined_service_t to container_runtime_t when executing container_runtime_exec_t.- Run restorecon /usr/bin/podman in postinstall- Add labels to allow podman to be run from a systemd unit file- Set the version of SELinux policy required to the latest to fix build issues.- Allow container_runtime_t to transition to spc_t over unlabeled filesAllow iptables to read container state Dontaudit attempts from containers to write to /proc/self Allow spc_t to change attributes on container_runtime_t fifo files- Add better support for writing custom selinux policy for customer container domains.- Allow shell_exec_t as a container_runtime_t entrypoint- Allow bin_t as a container_runtime_t entrypoint- Add support for MLS running container runtimes - Add missing allow rules for running systemd in a container- Update policy to match master branch - Remove typebounds and replace with nnp_transition and nosuid_transition calls- Add support to nnp_transition for container domains - Eliminates need for typebounds.- Allow container_runtime_t to use user ttys - Fixes bounds check for container_t- Allow container runtimes to use interited terminals. This helps satisfy the bounds check of container_t versus container_runtime_t.- Allow container runtimes to mmap container_file_t devices - Add labeling for rhel push plugin- Allow containers to use inherited ttys - Allow ostree to handle labels under /var/lib/containers/ostree- Allow containers to relabelto/from all file types to container_file_t- Allow container to map chr_files labeled container_file_t- Dontaudit container processes getattr on kernel file systems- Allow containers to read /etc/resolv.conf and /etc/hosts if volume - mounted into container.- Make sure users creating content in /var/lib with right labels- Allow the container runtime to dbus chat with dnsmasq - add dontaudit rules for container trying to write to /proc- Add support for lxcd - Add support for labeling of tmpfs storage created within a container.- Allow a container to umount a container_file_t filesystem- Allow container runtimes to work with the netfilter sockets - Allow container_file_t to be an entrypoint for VM's - Allow spc_t domains to transition to svirt_t- Make sure container_runtime_t has all access of container_t- Allow container runtimes to create sockets in tmp dirs- Add additonal support for crio labeling.- Fixup spec file conditionals- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild- Allow containers to execmod on container_share_t files.- Relabel runc and crio executables- Allow container processes to getsession- update release tag to isolate from 7.3- Fix mcs transition problem on stdin/stdout/stderr - Add labels for CRI-O - Allow containers to use tunnel sockets- Resolves: #1451289 - rebase to v2.15 - built @origin/RHEL-1.12 commit 583ca40- Make sure we have a late enough version of policycoreutils- Update to the latest container-selinux patch from upstream - Label files under /usr/libexec/lxc as container_runtime_exec_t - Give container_t access to XFRM sockets - Allow spc_t to dbus chat with init system - Allow containers to read cgroup configuration mounted into a container- Resolves: #1425574 - built commit 79a6d70- Resolves: #1420591 - built @origin/RHEL-1.12 commit 8f876c4- built @origin/RHEL-1.12 commit 33cb78b-- built origin/RHEL-1.12 commit 21dd37b- correct version-release in changelog entries- Add typebounds statement for container_t from container_runtime_t - We should only label runc not runc*- Fix labeling on /usr/bin/runc.* - Add sandbox_net_domain access to container.te - Remove containers ability to look at /etc content- use upstream's RHEL-1.12 branch, commit 56c32da for CentOS 7- properly disable docker module in %post- depend on selinux-policy-targeted - relabel docker-latest* files as well- bump to v2.2 - additional labeling for ocid- install policy at level 200 - From: Dan Walsh - Resolves: #1406517 - bump to v2.0 (first upload to Fedora as a standalone package) - include projectatomic/RHEL-1.12 branch commit for building on centos/rhel- new package (separated from docker)/bin/sh/bin/sh/bin/shcontainer-selinuxdocker-selinux 2:2.221.0-1.module_el8+653+feef7bfe2:2.221.0-1.module_el8+653+feef7bfe2:2.221.0-1.module_el8+653+feef7bfe 2:1.12.5-142:1.12.4-28 selinuxcontextscontainer-selinuxREADME.mddevelincludeservicescontainer.ifpackagescontainer.pp.bz2templatesbase_container.cilconfig_container.cilhome_container.cillog_container.cilnet_container.ciltmp_container.ciltty_container.cilvirt_container.cilx_container.cil/usr/share/containers//usr/share/containers/selinux//usr/share/doc//usr/share/doc/container-selinux//usr/share/selinux//usr/share/selinux/devel//usr/share/selinux/devel/include//usr/share/selinux/devel/include/services//usr/share/selinux/packages//usr/share/udica//usr/share/udica/templates/-O2 -g -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -fexceptions -fstack-protector-strong -grecord-gcc-switches -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 -m64 -mcpu=power8 -mtune=power8 -funwind-tables -fstack-clash-protectioncpioxz2noarch-redhat-linux-gnudirectoryASCII textSE Linux policy interface source . /etc/selinux/config _policytype=targeted if [ -z "${_policytype}" ]; then _policytype="targeted" fi if /usr/sbin/selinuxenabled && [ "${SELINUXTYPE}" = "${_policytype}" ]; then if [ -f /var/lib/rpm-state/file_contexts.pre ]; then /usr/sbin/fixfiles -C /var/lib/rpm-state/file_contexts.pre restore &> /dev/null rm -f /var/lib/rpm-state/file_contexts.pre fi fi #define license tag if not already defined/bin/shutf-83e2050a21cba0f85ed6a45824ae072a7b65f405d818633b3cdc88d3cc0a893b9container-tools:rhel8:820230816094934:20125149?p7zXZ !#,] b2u jӫ`(y/=øB=Moc]I#|,j[37-9Zoj2bng񥥤0"-!75GZ莆))GŪODbm>9f-Q٥T?)4\wCL>o纠/*S R2>ڰIœU'>cOv vn5t ̐*%3,[S$?@z@y.=)*S>dߐc+/Y&U4?I,RV,qbmq+Ҥk}JH|IsviqN\uN5I?1:$G&䫉;w!_Q{1%X9w(k מZ0R.TTal_"NI :ПLe=!SR"6BҮ 2AZ2(NAϳ:$Xn4ro;7b Ouģvߝm^lh2S)e=. ,cŒܖq&M.DxRHQ2 :α Ι1`92[:|85zHL*tnHK6 Xpt(Z"ȏt\Xr@B+/O%͇qu3. ,09?Pv}( \%X>n'঩<]v\$&rB6 Ҝ_@n~Fbi!qI^6^Me;;fP!g򓿘x " lGV{2m '2rqܺ{we?A44 [OB9@ X>@W [aLkfa&oW#G/28$5,b'U(7j;R9{ևUdke}!SͳD bN&` i@ĬS\"ӯ(b)[>֡ `ά;b\aCvP8(ꪴhI3CJw b#D֭U2lM@;Z:#"SECB!7|oPRHӕ;z%{ίH7U%SlN;`wqR 2|Ǟ`qc&m7CV( O/.&FM I@5<-)=& _,&nb{M䐤7SX%&DxdMCX$oIi(gOdL ߒT 8{ȟJ56u -"iMV!-2!ҕ1{ 6(@k0bA+_$GkG"W-2'k21!u}bԃ{x3OGN.MdCc+ʎ1^E8xXR 8\;gAcÂ`"{'yX>!T|Lnd Z7g~Te0VxĠ%gZ Z<}M ofFm|vc0zinűE ˷cu:FD3&^2l =4ۼ %g`O D܀-++5GD2j%Q4;A!,LCw b&V@rlAH  .`uG@ KCYIDT" K|3R&ݨ:}52ǀrDhh:YaR= eH{="7N)6" |ͨ@3m2_LIrj!';ןԴ '>}>>EŻ$GQyЋd!+J_0[U%1#sV_BzJ Ǣ# B4d7b L,G\ٰp-j k#FɞG'Jj-nv$. 4 lx:ɋ@=F*PeL*׉bMͯ͟MC6 g-LsJrq )'ˤ7$4R Te2J \Y=b,GcT Sd $&yfgP[mbɼ)~}QͻٲERە>$X1 +} j`:٧:0nMc_n*5k,rо1i &I/cJY!;j86j{$^9}*'žve볘yk&Yemmm4Vnl ]QvQH(u=nX׮aF|t\X}xK~h352'Ɩ,N;swhkiS>n= VcHS:[?-|1H\ z_3: bNH)7DNB X+0W8%u]c{TCbi9By^s-1]_@.um~W1b2`eC,Ra=z4 =~Ad!5t-g.`63֠d3-*ۯJT7H,!Ah1p'D"ro.μX=.W'LCPϮpj*0.w"$ԷKbKlZ7/wQS &.\|-evꮽ@|[ҋq3 3xjk7H&l%tކBnHҚOC0gNQ*wŻW؋+zR5/}8HT_F$0iP̌V\~BW;Eұ + D`zX;#w.rԁ(t{ƕ\m[t4;f+ϽG.kr"~ hy>d„_b q_ P)7 -]8zяw@j_TKL2!c]+rzϿ3 u)8|sRw9Yxzg T}'&Z< XuϴULˎ^ VK[6`,굕pG|nX An ? [7"Hiyn&O9 }#3o6pzm+2eS%~c%̐7Gt\VPM?ynHz:qJ 涥z}4D2=ijMD0M$+ \+m|.87v']@9]*edW,+enksP6SX&])gN0 K@Z`P~L(S;{dA2ݕ<A}҈ilE3LU1Iy\ť EL6Pz@yOUq`)t"?H3B`/%DM5uE[:i=N6PA:BCprf 0Uq0n}3$}-G]oT_*#zS *WŔo^Z <ߒt'L!Q,s6\vqe}Yop3u>+"A%j L\;y-# xitpz ]vKavh DUA+zKaoBY>*J KyW}m5 !EdX&3kt / \w/}讘98ӻot- QbvmʩAbF Aڛ Xm~LW,n˳`D8a}FBt`:.!0mڽD-(=[,+aA<}'D"V~e)䴊stЭ"HzQx_zw!?ʗTܫ9c? 4y*"P]~NaL5x .I _RG͌={RV#]53˾*,:zgYUޕ=keBeF s+X,iCeRl_,\|bW&O4+Poks=5E+H(OʀWlqe+Z콇 [ > ߩY _+WLCFq$JcCݕLϙ~YuB\|P<)塡 [re?g]ͳNH(QZ'!EVAmth0ͣZq%Ѩ|͙7Q™M ]~Kȉ$wUczےOv4$TorD;E[Zv5`2 XYl |Eм|ueyŰ')lѨ+ P硴swF̀.>,CkAM=5 #ȶY"-Z_:~m!S3ZaF"*d(=q̋Vf :K Mk٨Ƚ*͋{q24opEDG" 0?CXv` |+ ,yq]'yF 32(=5X '!׈^Yэhv R:*3A6on+?1[ YcH Qڥ҉unlpD3%@Q# lQ-y y~[GEVb]˥6lo^ˤvom?C?n,Dz'jR`ka˶z&0D9]%(&9j(9jfS kE~|@$Iq"̺g@ўL"yfzoBB٬{xj̮ȑ8nfO jUc| 1:&FXYCmRw\|Og#B.>̉&jȼ\τl 졠qn{1 ~?\J.ٲhjo@[ 6oU*3 tHS5C-81DSM -Ȱگ^AέD󗽽C XS5m&Q _w6ѺUL8~Tףr4P `mLǍBIˆ|bRNa̶sI5 Y6-z~;J@DnZa4-2jԤ¶f1a+V%<K@~7%B?sц|!ܒT̒Q+0"rtx'pû}7θ/9/AG 'H6MXđ3~an&]_?+V'I޲FV2:\(<AУ n6.`S|kcCZ.Ԓ],^$Yp4E?t%f,Ƕ&B iDi1|8h[}tt/󊒂 YVFJBPD:_fAV5qJ?{^ߍWˢpQv#lF?S䎅t HՄl$!lx1]kֆ@O1@V{5;Ŭ9+'4ܸ=r՗ؓ`Md[aa0S+\ϊDL(8mzb]zIόInQ{[=eXLߧ ;Lo0{X`׬< 'U#7MjG'N[clͺԪ2ށ .ťY4xlbl(3W ֡~,Yx]Gj3 |A+)u2G>a\\r|8NYNP^} dٜ .Vv9$VH.88cx`tqBxrAr٪ %Qd'p&vR,2 NՠRFFKuV8VR!0d?]GT666p8`XyAu ⷢ~!6Dl%bx' jvR ;j(5FTO+aeC][q(5Ra$L_ldRD^ȭ:<o~b"z-4Kj* $:qMsݛKJ,>xWF HNG Cph)o܅SJewwP^ZeQsj:g =3b7B3 * eu5Geg*a, +aZʤjQHC1HQ_1yz>9Z RqwVd'l|I3yq'w_ "'ޘ`vS?sp$Y6 jʬ@ kvkn]*9# :jٕOiT\aM FINK1`.@}(ȯҪukBܓi,T+81 \x,ѳF#q*[@!P@Hf r1]5(?rtp$"(PYY<'I=S+R' - Ho[ͧRZOKiv&ŠsZd|7z+vT_lעt7rĿtV@*3u$4B@wvArQiMiqee&2*d^?fxVjS {b!`|Rz=1y$xkOPs9;vTeM,`#bA/tTLq'ϟ .  @I^%4G#HQZ0)$j :ޒZ*H$!cwBjiL[>gQAbMjt>Z@i9g~"O /$s%y守S9CSn:eoi-XGf0<)ͮGH96o!g**${nWxӍ+psc *M67`YbCaGLނZ4E`h!Ktt|8K#qL,n!y t65ԏyޤ$%^ה(rrړ6iо˖A'Ըpݱ2,#l2T?ߝbb:nFiMhZ[i hnbz d_Qw5'eHz6!u,,~pW$ ߀P՚GY IǛ1 kI: c=kCzeT\ɧ )_F#:2(ov _$)ɑCzn(nf9/QPgҎ$]ZvC1h"^D^V?âh6V0`EbYB9’ݡ!8jH>9doVD[;Qc /͉9$W|jʳ\d`,ҙ9d[^fb]:R_ٹ6S$/t-q8x%xr G{jeA]igKч>?&M-* Xp*Q:_ODvw۲o.ǪQs?;8zē9j{D+4hX4[ELѤ_jJʤ_~oUbBmf$Cn/L$=mʝsPjp U?>ԐD}ɃŠ@ѫij= L?+dAy;h4.3f׌IIJjc{*T, \,0Ք.} I,dLFS}\E*+t5_odߟ,h('N8 57S,S~״\+~UHΊJk5jRk >ܿJ'c!Z1pD΁e0=jhw*II3`Re!gذ(ݛ;5je Y%P;*or!xrC |2k;R|f{ZxuY]a kZ9X[#7ٔ,Xұgv؉yWt3f[_ `S]SXTo{LR޾Ke*Ս8/uxn}+fN!qm\HMEzZNXv$a<0ZOma34kݩiZFNxvz8@eL[4)Ps@{d /TkI LPه8CPw^Gl`{x8 /T sQ }j &=ф'ۘ - 's7rڴHceE_'G/M0*M5#;S= ω#>MsV> -'^|k+Aj'ۍ+ҏermzߌg`_fX:ًsMFwG%ڟ$x(i|ʱ%{?qTIWWJRc(i<ۇ'|K%%@aE%~FR+i3WJO ، RT&0X"1'1@ЦQ7pw Wo1u6!}jr(â.^Y>P Z-k,n] daVØu,_ȩM ms!׉t!2!3cP h6@Hp ea.`m㫖,4ҝv=z2$d\ s?ޚ;?d)< fPri圉$ToVF&"&KA<)Ɯm0 :86` @[IX69OY9GkwrXG/$q~X>"3Z@N+7=Hzؕ@azlld,dعC,ޜ+~0L3Pw:lD!Rn$& ȏ>8.Ȣc"p_ Bz נ*k V ETIēbN9^=4vzo09n;}HP^ | ~+wr';y~&m(*XIY^7: lhy")2vd#r:NnY))XD.~?$6[p=rJ*={m0ٮs,FŌp*=tpXu/.[#)%s.I v$9G_7,*Pu()+s)p. ]WG*$rTk d`$yN^t6HLv?g'_1(=ZB$SmukAMG,ߋ! eu4>RS:T2: WBc1 0Aߙ7L Ξf|ߴCi)Q}^d&4V #-te@cr.i#l9 qPvvWyl4Qudh`H~N);ۖaxc}h+<1X蜙 ٯIy첎B.sK^p0zp)KOȱ)LٞzdĊ9N͊ ~ky=2U+"xʌjJ C({o 8oB7UA7 ܴD067#v8829e0ϝNG\ejйJ k}ԫhmWN'@ ^y g8I%Ö|ĺt C,H R',޺s\TK2 6*_5$1{6 =_pX"3RrN7L, 9T!r!W/N\7XCS6fҪ xB#=Ad>\&TO5R9h#/QhȅtNJC*Z# _4 9;MW`'g9J7o.}ѫ4m#Rl Ll ^ zveTP萅tcEf.`ҭ[|-cE;]F[w(u,zAձ7t*فq#18֝[X%p"96>fEר`F"_m$ڂ Jry[ֆjR=O|33`ʊ*T- \??F#|)b*hǑ0X: A*h4ەU^It*ݽ҆t=-38\:A4 ,:ʿxcQPqj _ЇB'Wv)!x|yهQss&7޶pYdၖ:V^WQ|hY_O:Z#pYIY'o 2)}>uKd$ 4~0Yz~և/)= ~cT8;SO_5]9:Dripڎ*Q01"ޟh:4FݮyWÔ_8[XװbB+A1[\Xt@{`~s͋>qh_;-P 6Lr*X_ڰ>%IQCS .ei+IvTYz#"\EWi6+˾̪/`v9{]on=j$>؜3iVOr_a>4ե>qZ{ T}[٥3Y fC9{blkr RO:u8UKo~O*V%@zOB#5cXXKO4@vO9)o9:,TA }~9i @N+c0D#7y7BGZSQ0ԞtHH0XMT,i>7i1EYidžv C띻?xIto'K 0#G9%V,^t*}=TȂ>4 S\ A;:~ Ra'ͨwEjv0:+R3{= Scw,$Q &z*'#Ŭgy\TGyCYMu:Β3a,nκH?1N_q/z39L^O\V050H=#5qFiFɃ.c 4 vLNi1H 8 }ݶ]#¸q5SA>|o;52eeP)ĭu]_4zzNE̻cU82=eEv8M Lo;Rށ//WվjoBN9Z#3(WH!@A y߹io gnΠx}Nv0T>\]j,gU6NQNS]:Cbԗ;&޽!.aǶw20+}#5n +0{-\`.Bi=,i$59J 0Oue\}'l[u;RVFv5ԧ;W/>ehHC+[5"<\~Uf?{RG l :~T)˶)_Ht8&m>&LrHj6~!N/$]kn{|r8#a z.'6 _HJĎ'>-+sl!3c|rw%yȣ<1cx 3!ؖ%d3TX `NU>pdE1=+P1 #.8\3Z{㘃) :BX/r0v59B.9e t(} ӫ1[Foier>|qJB;DjE}% hbKQYb08@ḍltĨӕ o}O7Ex$Qx%roɋ wZ v6,C^~[@ /aa贌˻jG#\>-6Gu%aK3_Kt85ze E;73) !. vo.p _D%E3ds j҇hvMz`u\h6G|Ln!ʹ8m#'<}hGDd7T}'k*f [wb`Hwx݊93lD, p^\DV% t,yL A՝i+~oGmWUC66t%*86C휶Ğ6 T$>Ѻ91J09YlIFɄ"n}cd|s;زE$=3Ki>FTVw0JO5IFfhtZp1ҳDH ]qH DghéH- \oy;wл>kL}"VsaagkCYF#r b^mPJC  |aU,gjd(x@KBk)*ָ# ?9 a p(rd.A;g+b޲ l Yna湾b\zU2sV\k1 5~.MU ܀y.2w\dEj",S]jP+ќC(a[c}a‡S%UYVeϯ Ynf\ԡ_y{t`}TVoوFc}Q!v+`MX5LoOb^V,wQ-7X@_?Q|yjTPx9a`un5q|7y#ڼ xΘC$P 3JGm%}BG=~>dR / \cBRVMڧp˗q7w„>-*v rpȕVr  %3j #=k~B]bcIU/Xש_ŋg_?ݎ02z-NI J; RMEjQn$z\ P11Ow%ut:[b*c'傋{ljl_9^ _U znY1+V ȫJc_ƙh0cl) UZ`u+} )ܕ"lαBrRvpƆJō&Lq86vxIhxQfĹ.˚9[jcpO)dd%j M}g]}>(*Q•غD"۟f`K qԝi(( .1%$&i ,]bv#{%v+䕉)3?dΈ>} )M}u7<<6VJ4Hx3_;ci4~Avx={djK=sAIYPgZ7> ܍; Ȓ?9M61lr(:h7t@Q;6msQd@Pf[0^UWgĭpрՊxNMhtgH-Go&vs:ͽeXqd]Pz7HpbƏIS9][gP8DvN5E#18DUhNH]X-`=V_k%FI(^fS19:8Y˴,\Lv/"xkx<Cdv$mrJMGڭ FlZ>AE hQ,Q*oeϋ?y6וA 6Tר! -yP3;x1!;`>Mett}}yTŅۼvUi_C/-iIx05g&.hmǗJ3ֈkzH2^}`B-xV?.(4pc`WE; nfc Lb R9SC5nWٔm)5)pg+;P;t-*R,0 EOJͪ,?CFo0)O46\`dS+ǁ|>F_d,k`rm2\)Hʟ.{)Pu:T908Hj/|tsKOGōK%'iRUՕWïa/ *WQ>s_{U3)PaO(V i[|r\u_&&l;#:sȃ mQxB|jmq>gϖ @eՍC{UdCB`8~81Cg6Si)ej4R5[vוYN,:Pu {Z]zTet%?qO>^{ M{Vm:>.C(dxw}yyI.~geDtcjɈ_HX߅Xƥy: u1/4>y )hbK16Rb| +p̰k_/nD_27 %$/m̨CSK ]׊eH9hqT䴳#k؂2{.6Xl8;^u#B-ϋaS'L:pM7 .f18-i |YE1L>*ĵò:ZtC 2X/@;;Z;ۃ_ٕEzoU`nri[r}?+j'#`hr$qQ0sZ>׿#ϕ"Ub|ȏŢ6I J'Xn}鶔y cުI?X~(to䌗y\M8i!EHd \ׯ({B@ ;2ET뚫v3J~Jv>jc$b#FÉ0nsg(>>[tJYP//)!ONП, p;q3XLp5%36Y:nΏ2ߚ:yc(mvB0|凰[jEfZ\13Nxz:($;. 1&s!j\a Tq]U-Lĥ!˒ub@uoo6WO>]h\ 5!^p(C;>Haȶs+Pd0cioZ;KDPKBfp#;[T׌Dݗ0y,z24| > RD:꾀eez'QIUl=/R>;ɚ!2γnPo߳ {b%{d& XeKdj`&s^+Y쟖(yE{[7iLw`-TYn qo:/qttj܁He͹t3*EI5kJ THᦇ۹$6(m ~sVڣ̛R Mdf_=.{tvA&5TחE7qI&umIA\͢h+) 1X2M)-( =kH^9P(`[|LJ LFIFADbWNQ3f迼s!%CP"ו|{)'6֝1#Vރ#)&9ҍFmb0]^ 㓲""a4yȳb]~Io>dVQٳ%7dt4[ 4̾٠9qcFV lAFi_jS9=H:M MrQLK"UQzݒI G<ݬgorf>IA6x'{ i= Pٰ YKf\MYZΞJp"7$v Z1:˶ n \RIiZ= G b7HuhE}FzDFhaܫ{9hp1ڰ[0}M|8բb홖|-Ҕ5U˥XSQz_Sex2#VQ_v:m*%>*!][XU+d.*BT0%mJ`qOeA,'*>9Apd97FRB[c c n 'j_ nd6'INk7<{rATa"qv[obU^- ;$fQ3X:.Gjcn݅&_B?ԛ_8l狯/C\(d5fw)/%qP]͇f@QbOVX2sy|Y(b nc"ɛ )_~?fS68`OS66&%#ɻdw|˧M+ErI>_pzXzܒ2刕tя4?m`' e6D|5W"+EHTiײK}cJTԅ>:>H$*q>OTRrw5FbIoAakrCt ;^ud<.Dsw~|d̜j mQ-7E,HB]~ܖ41k*u}T+E7D;Q:KV5AP a@U t8[[4ehh)As}b# LI׹otM]iқf&xHC U ɫJUS~C>v-G)%? Mrz3.=c\VnK,`=Ǒ =+P+sMKQ=,U+/?5&|훆MIu}*RT-=?hn6*~}&dva~ i% ι.Fg?b$[^ N%[f7ij=> #rkۘm79#AF=3ҝ<&uF1ky+zFL27.&-cghdOK^T!<4 8H)Xk߇#6եEcX_ WQ^##(u |UoEVLȎ'2?pp25DӖi&br: 'lڶO6k飒UIⰵOv6hmSXe0k~x$>vs*K2/NhVF}87p7<7*34 0"Q?^ϣ G-KFcL3sheoJdTյLTr\GG1ٓ'wI[ƿw*k:X"8=.҉KeV?6~cϥ^wL<w !EsEc'oL"O@nrI.LJ]c/={y-@a>u BJ6񔦁|I\/ѽ0W!~ 9~2\dw|J@Ö'.[SOg]J0'\8GƔCCKT+KVJ{*R_|8kj +n%QJǍR _H7+8J~B(qӏ)oW$X(̫t2sಕM~rH`hZAp.3XHy=ATmnϧ9Nb\ t.W9; GœRXy$#QD?rx%V9!Ȏ)iJBLf+ѧf HI @&fnA.tos@$ )q.ٔzxjR6? d9Ӵ+oz{hko[dW@Gt;J?Mv` mrƎ .!].6"Ty5,U ՗Dp=n lTDA7wZlHDg=-T)(Ҙ\k[aA6yeϷJCg췖 OK4ZB>U"ۏ"jP+of=gnbCu.4w2r'J)豸u39sCKWhyf@\7ؚI& GwjԹ8֢AK%\KߥՓ!$oxesO.w=iOz~%uZ/b Iߪ73#GB'N]`IR] R١y:RQ \½l^ *|(VoxEUc{d[֛i >$អJnc 9 L9d1JM|[j'LjjgmjS=n0“A |䍏bEIjIdt( o:^3lᎌ >wm'QɃ[师ykT K7rUm2B`"`3ʩQ t4'"gPu%&,}ma#3칖Z:iJGKaO=z͔y\@ZQ*7+9i]gh.l`-1f"ܿIo(z"3 ΌCSrYՌQ' ~<(d {=qLGÍq8O6D( 3}u,e~,XӊE~%ůAoosMRisg|᫿_vG!3K, ;$$XLD &G8~! K|8aPD6/cE]c ŕ Anre86>#>wl3=pyѫL8jwޱWZT1~N6+3նFaoFQ7J0 Պ @+!%Ɂjmi^`{ãB RBhg {o0!i(0U*:%壮 hpB74BE(ҝu8v<ZTy[*tH?'"QĽ);8u+VLkju(*n^c"Iz[/jzt#r8P5|\VʈzŘ߼r.)?rJ+ .I0,ccA FrX@-_5DVVYҽM2vqyx yP[޿Dd %zo}3"sYmV'PQMFvD.1uH#PVn_DK3e3 Jt<6 S_ ^DvQ WCÈ~>1yON1ﮐ q.wTtͻechWo|(_.-d̠*9ˠ[$6 nCXiGF'.w{;JtY sqMa)>5SX @Lp6~%@Zj S'88Gj/WC$΀a1b(B댦SO~dune MaS`A]kR;2qQ8t~s(B&oYZi֯X>e _,0Vbe7'x0]TAOIWHQQTPbçl+.㛊u=fN1#vd2pHI!J.A 迿b^?Gc,u$I'qxD'U%]Wc^6W>i* DfsNYNouR,_ЛC&BKa?oNc|qT‘[̣ )Q99\~5@>T8W+i_խKhH*NIQ/zǯFackҎEN\H~m.ϝxֲo/48¥#ĪG|m:hܫʂu'Q).\dEhd,3Cռ.xYU@U!gܲjQd_][Mel֮&꬐Z埪Z0T;鞊 w_&WFvӄ4Wh }LJ f[L2DfkGy01sU6V[%6 ~\nnTK*CSpBkܤ<TW悮;q /[5. h u߭Ѵ~=N0] ߜZiktYLz9u|E׀.(i=uVxm2{d)Px%o!ZkxzݙM]c$yD*ˇ]Y(k2ڎ̖_ԤESGp– %N)>~"TŤb`i3`i~#>+0["[a(x^ά1m <}ȃm߭LQކJt:ujc#3i *#f9nEk-c-Y *Ǿh|}q bOp*b'kl\)'ux\{^{Ր6~vβ&ND.OªA);GM%u6՞^jVoS*=72$<'̈}M5=g2%.a6s"Md_KEp񪔁6j5Ֆ_3{V]j rs0UweH5LI$-s8/ƾvA.(op J>@l&Q} db#uXMrԃ#e_8kfrXr&6FHGRNTgʒ밊Nm&Vvd`(㠀xy45 Ϫm_-{_8ݘ*'u:1qy'lPsxIjU1h2L f™p",G1z:Ssd-ߣZӁ8!ՔUv;y1dQ&nfH/ vvC)>`dG>DUEη=9pv1 (" ~.bI3i{6tC>@8ZZMҴꜦ~AxC}{{čp 8VJ\\3 }3G5<ȶj=7tPiݞ m,F35 n ~Z(2R6P *hxSqLM_10+ JUMA0 e)%Dj| #z`&^i0ĝ9 \(ir$v{(c&ROj2j =T%0CueG>r(dsS̽}\MeBb~_gɅ6GR R?.v@ki/(PJM;FW c垉~+e;WYVA6]K]}y%:FmDVt Aぱ&l7AP3N8/Dx"t!y@e0G(:CACOvtM9+y\aKg uAfR[/JYd. +NɐxWz*?0mUtI)h-CIVlNgH&f>hJLZp; wjp)˅)Q.oo_(}hlwC\ Y|!?Pj1WsY Grx ՓPc8&?4VR<K 0qªI>l<Ɗ/ `{P&NvoB&0 1O@HO(T(|Ieu% #N)yxkJ6$ :-(dMKO=HՉ+T-p̣zbŻcjJQΖt}> L^"x<K4AH|Bq{h%$T!;fC3HH]v2POe#YjWX*HDdltb!C3EK$|ǀK!Y6=Pau`k +E}d31b6ntRE|P(oi>>[u܋eU-qbqJ"q97=E8:ޔSv]B),]tQ ?2fm QHjPDQ!V܀ }٭Oˀe_UHA1Z0tEE݂,2SZ?ִ6<BOx8gw \Qj!gkt.t; m2sj&r* HM\\Y ,ˀTadž{<޹];"s1P9d$96ZƠߪ=ܚ쵟tY?-c@ ҍ­xuh_n#Z|ax*De-Zool\9pVmGh;G/\2mfc 䰤K.lÓ].,pidvs֫V!Wα](_Ϳ 4ZD^e*B ucp}B.:##3ZfzAߜf5 88R.}I_az[Fi kjCEd ɰT䏙=Å#ҏc-޴smaw\8lܒ4QZQsiF K]k'yV21FqO s6^7tdWf.l.k?\4رb o# &cfbދtR[φ3_$B q BtLfѼG4vC{]aaAG+qw=Hf!q2M2xyz{hVYT PnkLi\4<"6^?ڊ,&H$Wylz`>D71a xVZV tzdY; XCypkVS+]¬Qߪ Xԏx"S#`ښ֚i0m^b 둌o)3A|yYׇ uڷk|"M )W+7v{pϴ#?5,άz:}wenR:c]}JE03$_v5꫟Ttނl@V~̨ƬAvE#{Sk `Ojef|(|ZVT10|gf_8t*Y㔊 oZ㧀B7ևn8e)%G eJ;\,K,|\=9cVBDm1 YZ